CVE-2026-105762

Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remote_files.py accepted an attacker-controlled URL without authentication and caused the Dify server to retrieve it. A remote attacker could use the endpoint to send requests to internal services or cloud metadata endpoints, potentially exposing sensitive data and using the server as a network pivot. This issue is fixed in version 1.13.0.

• CWE-918

• https://github.com/langgenius/dify/commit/2f87ecc0ce1d05ab3ef9537f29b84a5fa5823017
• https://github.com/langgenius/dify/pull/32236
• https://github.com/langgenius/dify/releases/tag/1.13.0
• https://github.com/langgenius/dify/security/advisories/GHSA-8235-vv5j-mmvg
• https://github.com/langgenius/dify/security/advisories/GHSA-8235-vv5j-mmvg

Published

Oct 6, 2026

Last Modified

Oct 6, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-105756vLLM is an inference and serving engine for large language m…6.5
• CVE-2026-105757vLLM is an inference and serving engine for large language m…6.5
• CVE-2026-105758vLLM is an inference and serving engine for large language m…5.3
• CVE-2026-105759vLLM is an inference and serving engine for large language m…5.9
• CVE-2026-105760vLLM is an inference and serving engine for large language m…5.3
• CVE-2026-105761Dify is an open-source LLM app development platform. Prior t…7.1
• CVE-2026-105763Twenty is an open-source CRM (customer relationship manageme…9.6
• CVE-2026-105764Immich is a high-performance self-hosted photo and video man…7.7
• CVE-2026-105766Use of the backend-facing $scheme variable in the trailing-s…3.1
• CVE-2026-105767Improper Neutralization of Special Elements used in an OS Co…3.3
• CVE-2026-105768apko allows users to build and publish OCI container images …6.3
• CVE-2026-10577A security issue exists within the 1715-AENTR EtherNet/IP Ad…10